Test ID:	1.3.6.1.4.1.25623.1.0.106590
Category:	CISCO
Title:	Cisco Secure Access Control System XML External Entity Vulnerability
Summary:	A vulnerability in the web-based user interface of the Cisco Secure Access;Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the;information stored in the affected system.
Description:	Summary: A vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. Vulnerability Insight: The vulnerability is due to improper handling of the XML External Entity (XXE) when parsing an XML file. Vulnerability Impact: An attacker could exploit this vulnerability by submitting a crafted XML header to the affected device web framework. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3839 BugTraq ID: 96236 http://www.securityfocus.com/bid/96236 http://www.securitytracker.com/id/1037836
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.